skills/maragudk/skills/save-web-page/Gen Agent Trust Hub

save-web-page

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute the monolith CLI tool with specific arguments to archive web pages.
  • [INDIRECT_PROMPT_INJECTION]: The skill creates an attack surface for indirect prompt injection by ingesting and processing content from external web pages.
  • Ingestion points: The URL passed to the monolith command triggers the download and processing of external web content into the agent's environment.
  • Boundary markers: The skill does not explicitly provide boundary markers or instructions to ignore embedded prompts in its markdown, though the recommended tool flag helps.
  • Capability inventory: The skill uses monolith via command line execution to write to the file system (defaulting to ~/AI/web/).
  • Sanitization: The skill recommends the --isolate flag for monolith, which is a security feature that disables JavaScript and external resource loading in the saved HTML, significantly reducing the execution risk of the ingested content.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 06:38 AM